java实时更新权限_shiro动态刷新权限

1. 代码

话不多说,直接上代码:

import java.util.LinkedHashMap;

import java.util.Map;

import org.apache.shiro.spring.web.ShiroFilterFactoryBean;

import org.apache.shiro.web.filter.mgt.DefaultFilterChainManager;

import org.apache.shiro.web.filter.mgt.PathMatchingFilterChainResolver;

import org.apache.shiro.web.servlet.AbstractShiroFilter;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Component;

import com.qfx.demo.cache.MenuRoleCache;

import com.qfx.demo.cache.MenuRoleCache2;

import com.qfx.demo.vo.SysMenuRole;

@Component

public class ShiroPermissionSer {

@Autowired

ShiroFilterFactoryBean shiroFilterFactoryBean;

private int count = 1;

/**

*

功能:动态更新shiro权限(无需重启)

*

* @return

*/

public boolean updatePermission() {

boolean flag = false;

synchronized (shiroFilterFactoryBean) {

AbstractShiroFilter shiroFilter = null;

try {

shiroFilter = (AbstractShiroFilter) shiroFilterFactoryBean.getObject();

PathMatchingFilterChainResolver filterChainResolver = (PathMatchingFilterChainResolver) shiroFilter.getFilterChainResolver();

DefaultFilterChainManager manager = (DefaultFilterChainManager) filterChainResolver.getFilterChainManager();

// 1. 清空老的权限控制

manager.getFilterChains().clear();

shiroFilterFactoryBean.getFilterChainDefinitionMap().clear();

// ========== 2. 动态加载权限核心部分开始 ==========

// 后面这个可以直接从数据库里面获取

Map filterChainDefinitionMap = new LinkedHashMap();

// 对静态资源设置匿名访问,从resoutces/static后面开始写

filterChainDefinitionMap.put("/css/**", "anon");

// 可匿名访问的地址

filterChainDefinitionMap.put("/", "anon");

filterChainDefinitionMap.put("/index.jsp", "anon");

filterChainDefinitionMap.put("/login/loginPage", "anon");

filterChainDefinitionMap.put("/login/register", "anon");

filterChainDefinitionMap.put("/login/login", "anon");

// 请求 logout.do地址,shiro去清除session

filterChainDefinitionMap.put("/logout", "logout");

//循环url,逐个添加到section中。section就是filterChainDefinitionMap,

//里面的键就是链接URL,值就是存在什么条件才能访问该链接(正式环境从数据库获取,这里模拟数据权限切换)

if (count == 1) {

Map menuRoleMap = MenuRoleCache2.menuRoleCacheMap;

for (String key : menuRoleMap.keySet()) {

filterChainDefinitionMap.put(key, "roles["+menuRoleMap.get(key).getRoleNames()+"]");

}

count = 0;

} else {

Map menuRoleMap = MenuRoleCache.menuRoleCacheMap;

for (String key : menuRoleMap.keySet()) {

filterChainDefinitionMap.put(key, "roles["+menuRoleMap.get(key).getRoleNames()+"]");

}

count = 1;

}

//所有url都必须认证通过才可以访问，必须放在最后

filterChainDefinitionMap.put("/**", "authc");

shiroFilterFactoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap);

// ========== 2. 动态加载权限核心部分结束 ==========

// 3. 重新构建生成

Map chains = shiroFilterFactoryBean.getFilterChainDefinitionMap();

for (Map.Entry entry : chains.entrySet()) {

String url = entry.getKey();

String chainDefinition = entry.getValue().trim().replace(" ", "");

manager.createChain(url, chainDefinition);

}

flag = true;

System.out.println("更新权限成功");

} catch (Exception e) {

throw new RuntimeException("更新shiro权限出现错误!");

}

}

return flag;

}

}

2. 源码